Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: rnWoR1u98pnpaZr15HW0G5euHds9KFUgUD/JV83nBmU=
Subject key identifier: FF:3C:CA:46:46:2E:AB:DC:BF:B7:0E:85:F4:B6:04:5A:CD:3E:08:09
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 0199239ECD170ACD5FF780B37AC66FD0F264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:33 +0000
Manifest this update: Sun 07 Sep 2025 10:00:33 +0000
Manifest next update: Mon 08 Sep 2025 10:00:33 +0000
Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: SaVgDovPBY3xs1MdVdinQNMtLumFV+w2+CgvZ87ZfWc=)
2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:cd:17:0a:cd:5f:f7:80:b3:7a:c6:6f:d0:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Sep 7 10:00:33 2025 GMT
Not After : Sep 8 10:00:33 2025 GMT
Subject: CN=ff3cca46462eabdcbfb70e85f4b6045acd3e0809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:80:45:ee:e6:71:e7:8a:1e:2f:05:3b:0a:
98:ee:9a:5c:c1:a6:81:76:1a:52:8d:ec:a0:bc:1f:
c9:30:b4:d0:b4:83:88:36:91:fd:80:a9:70:76:3d:
20:bc:33:c2:bc:96:89:26:92:37:0f:de:8b:2e:e3:
bc:c6:b7:af:8c:f8:78:ab:78:a6:5b:0a:95:94:9c:
4d:2a:64:a6:fa:fd:e5:71:f7:2d:0a:4d:39:19:06:
49:f5:1f:85:49:c3:ec:0b:ce:6b:4e:78:34:c0:7a:
ce:a3:6e:5f:2a:6d:88:dd:14:6a:48:7d:29:7d:54:
3a:22:d4:f8:40:86:c5:be:e9:06:5f:92:f1:18:86:
67:58:b3:25:e5:b9:28:f3:b7:78:da:01:b4:44:e1:
8c:d0:0b:0c:68:da:82:61:53:8b:8f:64:56:62:82:
b6:25:2e:25:20:e7:2d:9a:de:12:5c:8e:09:b7:56:
9e:02:0d:7d:84:ac:c1:71:13:85:0f:8a:3a:bf:9c:
02:4f:1e:ac:f4:4e:cf:24:d3:e0:f0:48:b9:43:4c:
ff:9c:c6:07:f5:a6:1e:7e:55:0c:27:b3:ba:51:1e:
70:22:8b:30:f4:0f:8a:b1:56:73:0f:fe:d3:30:9a:
8a:0d:a0:75:72:89:c7:28:8a:a9:e9:91:31:40:d9:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:CA:46:46:2E:AB:DC:BF:B7:0E:85:F4:B6:04:5A:CD:3E:08:09
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:a1:26:3d:f8:c9:2e:47:a9:0d:88:03:23:2a:bc:03:f6:
7c:b0:29:5c:09:21:b2:57:bc:f7:e3:c9:fe:80:7f:66:f0:9e:
74:0f:15:9f:98:0a:83:ed:88:53:b1:ae:57:e5:8c:4b:03:be:
31:72:29:5c:c4:41:df:fc:d8:ae:1b:7e:09:0d:c3:97:45:2f:
d7:20:35:58:46:a6:10:6c:9e:77:8e:af:23:dd:a4:89:2e:9a:
7a:57:44:f3:a3:f0:33:23:88:5f:80:da:fa:fe:e6:9f:90:47:
b8:4b:39:13:c8:ba:d6:b8:26:7e:b5:23:35:b0:4d:ab:5c:93:
48:99:0d:cc:c3:66:fa:60:2e:c9:fe:46:7d:0a:24:e4:52:fc:
c6:b9:52:91:ce:0b:76:90:d2:8a:83:68:23:0d:60:98:eb:40:
96:92:8f:26:13:7a:12:70:b3:1f:ce:9a:9e:6d:b4:ad:ef:7f:
04:5d:08:d4:3e:13:8f:e5:cf:f5:25:c1:a6:8e:e5:68:0b:b3:
ae:77:da:a0:ca:b7:88:14:e1:75:62:4c:3c:17:62:72:20:d4:
dc:bd:f8:8c:37:61:e8:2f:24:16:ec:b0:23:31:82:6c:32:fd:
e0:c7:e1:da:77:8a:2a:27:96:c0:99:77:54:55:27:79:1e:6e:
7b:53:13:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjns0XCs1f94CzesZv0PJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTFiNjU5ODYyZDE1YTUxY2I1ZmYzNGRlNzIyM2M2OWU0
ODEyNmEwHhcNMjUwOTA3MTAwMDMzWhcNMjUwOTA4MTAwMDMzWjAzMTEwLwYDVQQD
EyhmZjNjY2E0NjQ2MmVhYmRjYmZiNzBlODVmNGI2MDQ1YWNkM2UwODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y6ARe7mceeKHi8FOwqY7ppcwaaB
dhpSjeygvB/JMLTQtIOINpH9gKlwdj0gvDPCvJaJJpI3D96LLuO8xrevjPh4q3im
WwqVlJxNKmSm+v3lcfctCk05GQZJ9R+FScPsC85rTng0wHrOo25fKm2I3RRqSH0p
fVQ6ItT4QIbFvukGX5LxGIZnWLMl5bko87d42gG0ROGM0AsMaNqCYVOLj2RWYoK2
JS4lIOctmt4SXI4Jt1aeAg19hKzBcROFD4o6v5wCTx6s9E7PJNPg8Ei5Q0z/nMYH
9aYeflUMJ7O6UR5wIosw9A+KsVZzD/7TMJqKDaB1conHKIqp6ZExQNnFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP88ykZGLqvcv7cOhfS2BFrNPggJMB8GA1UdIwQY
MBaAFCXhtlmGLRWlHLX/NN5yI8aeSBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAt
ZTNjN2Q0ZTY1OThmLzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAtZTNjN2Q0ZTY1OThm
LzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQOhJj34
yS5HqQ2IAyMqvAP2fLApXAkhsle89+PJ/oB/ZvCedA8Vn5gKg+2IU7GuV+WMSwO+
MXIpXMRB3/zYrht+CQ3Dl0Uv1yA1WEamEGyed46vI92kiS6aeldE86PwMyOIX4Da
+v7mn5BHuEs5E8i61rgmfrUjNbBNq1yTSJkNzMNm+mAuyf5GfQok5FL8xrlSkc4L
dpDSioNoIw1gmOtAlpKPJhN6EnCzH86anm20re9/BF0I1D4Tj+XP9SXBpo7laAuz
rnfaoMq3iBThdWJMPBdiciDU3L34jDdh6C8kFuywIzGCbDL94Mfh2neKKieWwJl3
VFUneR5ue1MT7Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:38 2025 by rpki-client